90fc8e44c0f24ba5807dd7702a19947560176c7a9208479322bdf50e46b9bd73

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 09:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extension-fix-TUWC0Z.hta
Size 2KB
Sample260803-k8fj3ashnd
SHA256 90fc8e44c0f24ba5807dd7702a19947560176c7a9208479322bdf50e46b9bd73
MD5 37a65754264cdc113d37af855a516774
SHA1 a730915c19bd02b79f3cbd689a9d95c3a0fe1b2f
SHA512 8d3ff50066debcabaef4cbf128e85ef04a5f1abbf3c1bc25cce929b13a444f1c4273e57bfb3dfdf07609934402e169a12fbb31f8605247abee75c2834a70467b
TLSH
T1F45149F7BA8253C9BC31499B6A2F209A54845A422369D5FCF2D79D00EF8CF4949743E8
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery

Malware Config

Signatures

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	6052	mshta.exe
5	6052	mshta.exe
6	6052	mshta.exe
7	6052	mshta.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\extension-fix-TUWC0Z.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:6052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads